Sophos vulnerabilities found, patched

Fixes issued for archive handling problems.

Researchers working with Tipping Point's Zero Day Initiative (ZDI) program have released details of two vulnerabilities in the Sophos scanning engine. The flaws, in the handling of CPIO and SIT archive formats, could be exploited by maliciously crafted files to cause a buffer overflow and potentially breach system security.

The vulnerabilities are being announced after patches for the flaws have been released by Sophos. Users are advised to ensure their products are running the latest updates from Sophos (engine version 2.40).

Further information on the issues can be found at Sophos, here and here, and at the ZDI site, here and here. A joint alert from Secunia is here.

Secunia is also carrying an alert (here) on a vulnerability in ClamAV found during recent testing of gateway mail filters, reported in VB here.

13 December 2006

Tags: virus

del.icio.us

digg this

News


	February issue of VB published The February issue of Virus Bulletin is now available for subscribers to download. 1 February 2012 Hacktivists hijack DNS of popular websites Security at registrars may be weak link. 26 January 2012 New RFC describes best practices for running DNS-based lists DNSBL users advised to avoid those lists that charge for delisting. 24 January 2012 Vulnerability turns McAfee's anti-malware solution into open relay Flaw allows for spam to be sent through customers' PCs. 19 January 2012 AV-Test releases latest results Business and consumer products achieve high pass rate. 18 January 2012 Subscribe \| View All virusbtn: Youve probably heard about crooks adding their own card reader to ATMs. In Brazil, they infect those ATMs with malware http://t.co/xALuOuEe 1 day ago virusbtn: Dutch ISP KPN was hacked in January, exposing millions of customers personal details. There are lessons to be learned http://t.co/CSHJA6hy 1 day ago Follow us

News Archive


	2011 2010 2009 2008 2008 2007 2006 2005 2004 2003 2002 Subscribe \| View All

News


	See also Calendar of Events Polls

Quick Links

Poll

The Japanese government is reported to have commissioned a 'defensive virus'. Is 'defensive' malware ever a good idea?
Leave a comment
View 11 comments

Jobs


	In Virus Bulletin's jobs pages among others: German Speaking Technical Support Engineer (Berkshire, United Kingdom) Anti-Virus Researcher (Redmond, WA, United States)

Virus Bulletin currently has 224,238 registered users.

Fighting malware and spam

Sophos vulnerabilities found, patched